Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-62001

BullWall Ransomware Containment hard-coded folder exclusions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisa-cg

Description

BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to balance monitoring scope and performance. Certain exclusion patterns could allow an authenticated attacker to rename directories in a way that avoids monitoring. Fixed in 4.6.1.14 and 5.0.0.42, which remove hardcoded exclusion behavior and exposes exclusion handling as configurable settings.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BullWall Ransomware Containment

Default version status: unknown

  • 4.6.0.0 to < 4.6.1.14affected
  • 4.6.0.0 to < 5.0.0.42affected
  • 4.6.1.14unaffected
  • 5.0.0.42unaffected

References